Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131342e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e3131342e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          pgq1ro/DnTUd+520IudYtIQy3N4Tjel2Wy4WpkSEbpQ=
Subject key identifier:   BC:F4:FE:FC:A3:76:FF:CA:05:D0:CA:89:A7:89:D3:B6:FD:84:35:35
Certificate issuer:       /CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
Certificate serial:       36761FE64EF553F7DC45FE5536526F185CE0DF63
Authority key identifier: FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131342e302f32342d3234203d3e20323633333439.roa
Signing time:             Wed 23 Sep 2026 01:05:15 +0000
ROA not before:           Wed 23 Sep 2026 01:00:15 +0000
ROA not after:            Wed 22 Sep 2027 01:05:15 +0000
asID:                     263349
IP address blocks:        189.51.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:76:1f:e6:4e:f5:53:f7:dc:45:fe:55:36:52:6f:18:5c:e0:df:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
        Validity
            Not Before: Sep 23 01:00:15 2026 GMT
            Not After : Sep 22 01:05:15 2027 GMT
        Subject: CN=BCF4FEFCA376FFCA05D0CA89A789D3B6FD843535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c5:c8:b4:f5:69:89:be:0b:c9:5b:c7:00:89:
                    38:45:e6:58:bf:6e:10:7d:44:e6:e1:6b:f7:fb:1c:
                    69:17:bf:64:31:d5:c5:30:3c:9f:13:b0:8b:80:ab:
                    39:b7:4d:58:4b:1b:18:78:cd:e8:57:96:5a:a1:21:
                    8e:c8:c8:69:bd:57:43:c4:46:40:7c:4e:67:58:c0:
                    64:2f:99:81:9b:7a:25:4e:3e:84:7d:85:68:b0:68:
                    6d:ab:43:a6:14:a2:15:48:8b:c8:00:ca:3b:74:ea:
                    fe:95:2e:68:18:3f:1b:c8:35:82:4a:1f:80:68:7e:
                    d0:2f:3c:fa:0c:c9:a5:25:59:71:e0:90:9b:42:84:
                    02:44:23:03:ca:fc:a5:5c:95:92:50:2c:c0:62:9c:
                    86:ec:c6:7c:0d:6e:0d:50:fb:b1:0d:65:54:62:b2:
                    ae:6f:9b:a5:a3:21:e0:f9:ec:1b:93:dc:a9:2c:3d:
                    ae:f4:5c:21:c0:83:1d:57:c8:f1:e1:82:87:c3:de:
                    e3:5e:cf:4f:8c:52:bd:7e:90:94:f2:67:56:ae:a8:
                    8a:ae:a5:f9:6e:be:b7:e7:91:cd:17:59:69:ec:2d:
                    ac:db:df:fb:ca:34:7f:31:07:6d:00:58:04:81:f0:
                    03:56:ca:88:d8:f5:d9:28:f7:72:6c:72:ac:6c:53:
                    bf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F4:FE:FC:A3:76:FF:CA:05:D0:CA:89:A7:89:D3:B6:FD:84:35:35
            X509v3 Authority Key Identifier:
                keyid:FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131342e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:fc:9a:8c:6b:51:55:8f:b1:83:85:2a:0e:4d:64:8f:25:93:
         04:c3:46:60:b7:c0:a8:14:0d:c3:43:14:2a:98:78:c5:68:c2:
         3d:83:3d:b9:5e:eb:c4:73:7d:a0:86:66:94:68:9b:a4:5b:74:
         11:b2:c8:55:fc:6e:ee:fa:4a:e0:9c:de:37:69:d0:d4:46:1d:
         71:f1:89:99:6b:76:32:48:6c:a9:5b:af:d1:ee:a6:60:70:7e:
         22:ea:79:b0:f2:98:7b:24:9c:1d:08:e9:5a:ef:b7:56:c0:9f:
         ce:36:43:66:de:88:97:a9:62:5c:65:09:20:7b:65:1b:94:6d:
         7d:79:ef:4b:b9:f3:cd:62:4e:24:4b:12:e9:5e:a1:4c:25:92:
         45:5b:11:c6:a6:1b:11:3f:ce:f7:52:1b:b7:4b:dd:cb:a6:99:
         9d:c6:b2:4d:23:89:6d:30:94:e6:b4:c5:f3:44:ce:ee:69:09:
         9f:35:36:a8:22:86:5a:fe:e8:ca:57:98:98:35:83:65:e2:01:
         7c:3a:29:92:89:f2:bf:bf:55:e8:50:04:f3:ec:ae:6d:eb:c8:
         52:c2:d4:b3:bb:44:a2:2b:89:ce:0e:d6:ab:60:6d:f6:ec:29:
         31:ce:ce:68:1b:ea:e5:43:b8:28:6f:a2:0e:73:2d:6d:6a:bc:
         4c:f6:d6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 18:23:13 2026 by rpki-client